nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-45439 CVE-2026-45439
CRITICAL
WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability
Record summary
CVE-2026-45439 has a selected CVSS score of 9.3 (critical).
Description
Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 16, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Realtyna Organic IDX pluginBrowse Realtyna / Realtyna Organic IDX pluginreal-estate-listing-realtyna-wplDefault status: unaffected | CVE List | Through 5.1.0 | affected |
References
2patchstack.comvdb entry
https://patchstack.com/database/wordpress/plugin/real-estate-listing-realtyna-wpl/vulnerability/wordpress-realtyna-organic-idx-plugin-plugin-5-1-0-sql-injection-vulnerability?_s_id=cve